This is an automated email from the ASF dual-hosted git repository. janc pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/mynewt-site.git
commit 7f4a87f6ccab7b1db5335640ace601c78e0d6b20 Author: Wojciech Pietraszewski <[email protected]> AuthorDate: Tue Apr 30 18:43:27 2024 +0200 site/docs/pages: Update security bullets Fixes the page content not rendering correctly by moving it from .html file to markdown file. --- docs/pages/securitybullets.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/docs/pages/securitybullets.md b/docs/pages/securitybullets.md index 792b488b77..7e6ed8557c 100644 --- a/docs/pages/securitybullets.md +++ b/docs/pages/securitybullets.md @@ -1,8 +1,12 @@ -html: pages/securitybullets.html -sub_page: True -<!-- -## Markdown +### Security through the life of a device -You could make a page with markdown but then you will need to add a {{ content }} to your pages/whatever.html. ---> +One of the primary goals of the Apache Mynewt project is to facilitate security assurance at every stage of a product's lifecycle. Securing a device essentially requires balancing the cost of the product inclusive of all its security mechanisms and the value of the product, keeping in mind that neither should exceed the cost of attacks on deployments of that product. Apache Mynewt OS takes care of the fundamental security requirements of a connected embedded device in a commercial market [...] + +| Stage | Secure Feature/Service | +|---------------|----------------------------------------------------------------------------------------------------------------------------------------------------| +| Development | Dev image signing and verification <br> Separation of duties <br> Enable HW security (e.g. crypto accelerator) <br> Enable security logs and stats | +| Manufacturing | Unique Device ID <br> Unique Crypto keys <br> Secure bootloader <br> Manufacturing data integrity | +| Deployment | Prod image signing and verification <br> Authenticated and authorized network join <br> Secure manufacturing data upload <br> Secure time update | +| Operations | Authorized access to device <br> Mutual authentication <br> Encrypted communication <br> Data integrity <br> Secure over-the-air updates | +| Decommission | Authorized credential removal | \ No newline at end of file
